totally blocked in giving them write access to the repo. Fine. The argument is well rehearsed: the public should not be able to give the agents instructions to alter the code base (for obvious reasons) - but we want to get around that with safeguards.